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This listing of claims will replace all prior versions, and listings, of claims 
in the application. 

Listing of Claims: 

Claim 1 (Original): A method comprising: 

generating a policy digest for a cached policy at a client, the policy digest 
identifying at least one assertion the client is complying with; and 

including the policy digest in a request by the client to access a resource. 

Claim 2 (Original): The method of claim 1, wherein generating the 

policy digest includes generating a hash of the cached policy. 

Claim 3 (Original): The method of claim 1, wherein generating the 

policy digest includes encoding a bit vector identifying selected assertions from the 
cached policy. 

Claim 4 (Original): The method of claim 1, wherein generating the 

policy digest includes reading an assertion from the policy, assigning a bit value to 
the assertion, and writing the bit value to a bit vector. 

Claim 5 (Original): The method of claim 1, wherein generating the 

policy digest includes generating a hash of the cached policy if the cached policy is 
normalized. 
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Claim 6 (Original): The method of claim 1, further comprising: 

incrementing a counter each time the cached policy is used; and 
removing the cached policy from a cache at the client when the counter 
exceeds a limit value. 

Claim 7 (Original): The method of claim 1, further comprising: 

incrementing a counter for the cached policy when a fault is received at the 

client in response to using the cached policy; and 

removing the cached policy from a cache at the client when the counter 

exceeds a limit value. 

Claim 8 (Original): The method of claim 1, further comprising 

logging a diagnostic event when a fault is received at the client to identify a system 
problem. 

Claim 9 (Original): A method comprising: 

extracting at a host a policy digest identifying a cached policy, the policy 
digest included in a request to access a resource; and 

denying access to the resource if the policy digest identifies an invalid 

policy. 

Claim 10 (Original): The method of claim 9, further comprising 
issuing a fault for the client if the policy digest identifies an invalid policy. 
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Claim 11 (Original): The method of claim 9, further comprising 
decoding the policy digest. 

Claim 12 (Original): The method of claim 9, further comprising 
decoding a bit vector of the cached policy. 

Claim 13 (Original): The method of claim 9, further comprising 
reading an assertion from the policy digest. 

Claim 14 (Original): The method of claim 9, further comprising 
reading a row hash of the cached policy. 

Claim 15 (Original): A system comprising: 
a policy digest identifying at least one cached policy; and 
a messaging module denying access to a resource if the policy digest 
identifies an invalid policy for the resource. 

Claim 16 (Original): The system of claim 15, wherein the messaging 
module extracts the policy digest from a message requesting access to the resource. 

Claim 17 (Original): The system of claim 15, wherein the messaging 
module decodes the policy digest. 

Claim 18 (Original): The system of claim 15, wherein the policy 

digest is a bit vector of a cached policy. 
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Claim 19 (Original): The system of claim 15, wherein the policy 
digest is a row hash of a normalized policy. 

Claim 20 (Original): The system of claim 15, wherein the policy 
digest identifies at least one selected assertion. 

Claim 21 (Original): A system comprising: 

a policy digest for a cached policy at a client, the policy digest identifying at 
least one assertion the client is complying with; and 

a messaging module including the policy digest in a request by the client to 
access a resource. 

Claim 22 (Original): The system of claim 21, wherein the messaging 
module encodes the policy digest. 

Claim 23 (Original): The system of claim 21, wherein the policy 
digest is a bit vector of a cached policy. 

Claim 24 (Original): The system of claim 21 ? wherein the policy 
digest is a row hash of a normalized policy. 

Claim 25 (Original): The system of claim 21, wherein the policy 
digest identifies at least one assertion selected by the client. 
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Claim 26 (Original): A computer program product encoding a 
computer program for executing on a computer system a computer process, the 
computer process comprising: 

generating a policy digest for a cached policy at a client, the policy digest 
identifying at least one assertion the client is complying with; and 

including the policy digest in a request by the client to access a resource. 

Claim 27 (Original): The computer program product of claim 26 
wherein the computer process further comprises generating a hash of the cached 
policy. 

Claim 28 (Original): The computer program product of claim 26 
wherein the computer process further comprises encoding a bit vector of the 
cached policy. 

Claim 29 (Original): The computer program product of claim 26 
wherein the computer process further comprises reading an assertion from the 
policy, assigning a bit value to the assertion, and writing the bit value to a bit 
vector. 

Claim 30 (Original): The computer program product of claim 26 
wherein the computer process further comprises generating a row hash of the 
cached policy if the cached policy is normalized. 



I ee @ha y es poc sca^^ss 



6 



filename MSI-J853US MQi 



1 

2 

■*> 
j 

4 

5 

6 

7 

8 

9 

10 
11 

12 
13 
14 
15 
16 
17 
IS 
19 
20 
21 
22 
23 
24 
25 



Claim 31 (Original): The computer program product of claim 26, 

wherein the computer process further comprises: 

incrementing a counter each time the cached policy is used; and 

removing the cached policy from a cache at the client when the counter 

exceeds a limit value. 

Claim 32 (Original): The computer program product of claim 26 
wherein the computer process further comprises: 

incrementing a counter for the cached policy when a fault is received at the 
client in response to using the cached policy; and 

removing the cached policy from a cache at the client when the counter 
exceeds a limit value. 

Claim 33 (Original): The computer program product of claim 26 
wherein the computer process further comprises triggering a diagnostic event when 
a fault is received at the client. 

Claim 34 (Original): A computer program product encoding a 
computer program for executing on a computer system a computer process, the 
computer process comprising: 

extracting at a host a policy digest identifying a cached policy, the policy 
digest included in a request to access a resource; and 

denying access to the resource if the policy digest identifies an invalid 

policy. 
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Claim 35 (Original): The computer program product of claim 34 
wherein the computer process further comprises decoding the policy digest. 

Claim 36 (Original): The computer program product of claim 34 
wherein the computer process further comprises decoding a bit vector of the 
cached policy. 

Claim 37 (Original): The computer program product of claim 34 
wherein the computer process further comprises reading an assertion from the 
policy digest. 

Claim 38 (Original): The computer program product of claim 34 
wherein the computer process further comprises reading a row hash of the cached 
policy if the cached policy is normalized. 
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